992 casos · pág. 10/50
Palo Alto Networks PSIRT published advisory CVE-2026-0318, a denial-of-service (DoS) vulnerability in PAN-OS affecting Panorama management appliances. The excerpt lists affected builds across the 11.1, 11.2, 12.1 and 12.2 release trains, including many hotfix (h) builds. It gives no CVSS score, attack vector, authentication requirements, …
Palo Alto Networks disclosed CVE-2026-0313, an OS command injection vulnerability (CWE-78) in the OS Query content pack for Cortex XSOAR and Cortex XSIAM. An authenticated administrator can execute arbitrary OS commands on remote endpoints. The vendor rates it MEDIUM with MODERATE suggested urgency (CVSS-BT 6.1 / CVSS-B 8.6) and states it…
Palo Alto Networks PSIRT published advisory CVE-2026-0314, a local denial-of-service (DoS) vulnerability in the GlobalProtect App for Windows. The advisory lists a wide range of affected releases across the 6.0, 6.2 and 6.3 branches. The excerpt gives no CVSS score, exploitation status, attacker prerequisites or fixed versions. Defenders …
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any m…
Palo Alto Networks disclosed CVE-2026-0311, a server-side request forgery (SSRF, CWE-918) vulnerability in Checkov by Prisma Cloud. A local unauthenticated user can make unauthorized network requests from the host to internal services. The vendor rates it LOW severity with MODERATE suggested urgency (CVSS-B 4.8, CVSS-BT 1.1) and says it i…
Palo Alto Networks published advisory CVE-2026-0312 describing path traversal vulnerabilities (CWE-22) in Checkov by Prisma Cloud that let an unauthenticated local user write files to arbitrary locations on the scanning filesystem. No special configuration is required to be exposed. The vendor rates it MEDIUM (CVSS-B 6.8, CVSS-BT 4.3) wit…
Palo Alto Networks PSIRT published advisory CVE-2026-0315, a local privilege escalation vulnerability in the GlobalProtect App on macOS. The excerpt lists affected versions only, in the 6.2.x and 6.3.x branches. It gives no CVSS score, root cause, exploitation status, or fixed versions. Defenders running GlobalProtect on macOS endpoints s…
Palo Alto Networks PSIRT published an advisory for CVE-2026-0317, a denial-of-service vulnerability in PAN-OS, the operating system of its firewalls. The text provided contains only the advisory title and a list of affected-version CPE entries. It does not give a CVSS score, attack conditions, exploitation status or fixed versions. Defend…
Palo Alto Networks PSIRT published advisory CVE-2026-0320, an authenticated admin command injection vulnerability in PAN-OS. The advisory lists a wide range of affected releases across the 10.2, 11.1, 11.2, 12.1 and 12.2 branches, including many hotfix builds. The excerpt provided does not mention active exploitation, a CVSS score, or fix…
Palo Alto Networks PSIRT published advisory CVE-2026-0307 covering local privilege escalation vulnerabilities in the GlobalProtect App. The affected product list spans Linux, macOS, Windows, iOS, Android and ChromeOS clients. The advisory excerpt provided contains no CVSS score, exploitation status, technical root cause or fix details, so…
The FBI issued a Public Service Announcement through IC3 cautioning that threats against election workers endanger individuals and jeopardize the stability of the US electoral process ahead of the November 2026 midterm election. The FBI defines election workers broadly: elected and appointed officials, staff, volunteers, contractors, vend…
The FBI, via an IC3 Public Service Announcement, is warning US voters about federal election crimes ahead of the November 2026 midterm election. It describes three broad categories: campaign finance violations, threats to election workers, and civil rights violations such as voter suppression or intimidation. Examples include false voter …
The FBI warns that scammers are likely to exploit the 2026 US Midterm Election to run financial fraud schemes against victims across the United States. The PSA updates alert I-102924-PSA from 29 October 2024. Scammers use candidates' names, images, logos and slogans to solicit fake campaign contributions, sell merchandise that is never de…
The FBI and CISA issued a joint Public Service Announcement warning that malicious cyber actors may use phishing and smishing against election officials, candidates and political organizations ahead of the 2026 U.S. midterm elections. These targets are attractive because of their access to voter registration data, current government offic…
CERT-FR advisory CERTFR-2026-AVI-1336, published 16 October 2026, reports multiple vulnerabilities across IBM products. Per the advisory, exploitation could allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass, SSRF, XSS, CSRF, and data confidentiality and integrity compromise. Affe…
CERT-FR advisory CERTFR-2026-AVI-1335, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with SUSE products. Some of them allow an attacker to escalate privileges, cause a remote denial of service and breach data confidentiality. Other listed impacts are data integrity breach and security policy bypas…
CERT-FR advisory CERTFR-2026-AVI-1328, published 16 October 2026, reports multiple vulnerabilities in the Mattermost Desktop App. The vendor did not specify the security impact, and the advisory only states that an attacker could cause an unspecified security problem. It is based on Mattermost security bulletins MMSA-2026-00778 and MMSA-2…
CERT-FR advisory CERTFR-2026-AVI-1334, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with Red Hat Enterprise Linux. Some of them allow a remote attacker to execute arbitrary code, escalate privileges and cause a remote denial of service. Other listed impacts are data integrity and confidentiality …
CERT-FR advisory CERTFR-2026-AVI-1332, published 16 October 2026, reports multiple vulnerabilities in Microsoft products that may allow remote arbitrary code execution, privilege escalation, remote denial of service and breach of data confidentiality. The advisory is based on Microsoft security bulletins dated 15 October 2026 for four CVE…
CERT-FR advisory CERTFR-2026-AVI-1325, published 15 October 2026, reports a vulnerability in Cisco AsyncOS Software for Cisco Secure Email Gateway that allows a remote attacker to execute arbitrary code and compromise data integrity. Cisco states that CVE-2026-76519 is actively exploited. The advisory is based on Cisco security advisory c…
